A security architect is designing a system that requires both encryption and digital signatures. The system will be used on a variety of devices, including low-power IoT devices. The architect must balance security and performance. Which approach is most appropriate?

Use RSA for both encryption and signatures.

Use ECC for signatures and a hybrid approach for encryption (ECC key exchange with AES for data).

Use AES for both encryption and signatures.

Use a single key pair for both encryption and signatures.

What is a primary advantage of Elliptic Curve Cryptography (ECC) over traditional asymmetric algorithms like RSA?

ECC provides stronger security with shorter key lengths

ECC is a symmetric algorithm and therefore faster

ECC is immune to quantum computing attacks

An IoT device manufacturer needs to implement digital signatures for firmware updates. The devices have limited CPU and memory, and the signature verification must be fast. Which cryptographic approach is most appropriate?

Use RSA-4096 with a SHA-512 hash.

Use ECC with a 256-bit curve and SHA-256 hash.

Use AES-256 in GCM mode for signing.

Use DES for signature generation.

What is the purpose of a Certificate Revocation List (CRL) in a PKI?

To store the private keys of certificate holders

To list certificates that have been revoked before their expiration date

To generate new certificates for users

To list all certificates issued by the CA

Certified Information Systems Security Professional

Domain 3Objective 6

3.6 - Select and Determine Cryptographic Solutions CISSP Practice Questions (Page 4)

Part of the Security Architecture and Engineering domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

7concepts

13%of the exam

Questions 16–20

16expert · hard
A security architect is designing a system that requires both encryption and digital signatures. The system will be used on a variety of devices, including low-power IoT devices. The architect must balance security and performance. Which approach is most appropriate?
Select an answer first
17foundation · easy
What is a primary advantage of Elliptic Curve Cryptography (ECC) over traditional asymmetric algorithms like RSA?
Select an answer first
18foundation · easy
Which of the following is a common asymmetric encryption algorithm?
Select an answer first
19application · medium
An IoT device manufacturer needs to implement digital signatures for firmware updates. The devices have limited CPU and memory, and the signature verification must be fast. Which cryptographic approach is most appropriate?
Select an answer first
20foundation · easy
What is the purpose of a Certificate Revocation List (CRL) in a PKI?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.